Re: AoE -- was Re: todolist

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ian Latter wrote:

>   I'm fine with the protocol not supplying security, as
> long as its not quoted that way ... just show people how 
> to use IPSEC and L2TP to route this securely, instead of 
> advertising it for what it isn't.

Hold on now...I'm not advertising it for what it isn't. AoE, like most
any SAN protocol, is intended to be run on a TRUSTED network. Not being
routable means it should not be able to escape your trusted network. At
my shop we run AoE on its own network completely separate from the rest
of our traffic just as you would with any other SAN. To do anything else
is foolish. As such it cannot be sniffed by anyone not on that network.
Encryption and authentication are not necessary on a trusted network.
Consider an AoE SAN to be just like the IDE ribbon cable connecting your
drive to your motherboard because that is essentially what it is. If
someone can tap into your IDE ribbon cable they can see your data just
as they can if you somehow allow them onto your AoE SAN.
The beauty of AoE is simplicity. If you wrap it in IPSEC and L2TP you
lose that. If you want a routable SAN protocol use iSCSI.

I stand by my claim (and Coraid's) that not being routable is a security
advantage.

- --
Tracy R Reed
http://ultraviolet.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFFA6cS9PIYKZYVAq0RApLwAJoDXPMStveMw1eeSOPrgfK4qfFyegCggeD2
uSMdkRC/qaA50CLVh4xULj0=
=RwJp
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642